Similarityoung opened a new pull request, #1031: URL: https://github.com/apache/dubbo-go-pixiu/pull/1031
**What this PR does**: Fixes the two workflow security findings behind the SonarCloud quality gate failure: - Pin imports-formatter to v1.0.10 and key its cache by that version, removing the broad restore key so an older unpinned binary cannot bypass installation. - Download the ZooKeeper test JAR directly from raw.githubusercontent.com and disable wget redirects with --max-redirect=0. **Which issue(s) this PR fixes**: Addresses SonarCloud rules githubactions:S8545 and githubactions:S6506 reported by https://github.com/apache/dubbo-go-pixiu/runs/98408667286. **Special notes for your reviewer**: Validation: - actionlint v1.7.7 passed (ShellCheck integration disabled because ShellCheck is not installed locally). - Installed [email protected] successfully and verified its embedded module version. - Executed the updated JAR download step successfully and verified the downloaded archive with unzip -t. - git diff --check passed. Full application tests were not run locally because this change only updates workflow dependency acquisition. The PR's SonarCloud analysis will verify the quality gate. **Does this PR introduce a user-facing change?**: ```release-note NONE ``` -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: [email protected] For queries about this service, please contact Infrastructure at: [email protected] --------------------------------------------------------------------- To unsubscribe, e-mail: [email protected] For additional commands, e-mail: [email protected]
